CN104914815A - Processor monitoring method, device and system - Google Patents

Processor monitoring method, device and system Download PDF

Info

Publication number
CN104914815A
CN104914815A CN 201510178984 CN201510178984A CN104914815A CN 104914815 A CN104914815 A CN 104914815A CN 201510178984 CN201510178984 CN 201510178984 CN 201510178984 A CN201510178984 A CN 201510178984A CN 104914815 A CN104914815 A CN 104914815A
Authority
CN
Grant status
Application
Patent type
Prior art keywords
processor
monitoring
monitored
function
monitor
Prior art date
Application number
CN 201510178984
Other languages
Chinese (zh)
Inventor
裴蕾
Original Assignee
北汽福田汽车股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date

Links

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS], computer integrated manufacturing [CIM]
    • G05B19/41875Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS], computer integrated manufacturing [CIM] characterised by quality surveillance of production
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02PCLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
    • Y02P90/00Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
    • Y02P90/02Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

The invention provides a processor monitoring method, a processor monitoring device and a processor monitoring system. The method comprises performing verification on a read only memory and/or a random access memory in a monitored processor, monitoring at least one of a region storing a specified function, a program flow of the specified function, an instruction set of the monitored processor and a question and answer communication mechanism in the read only memory and/or the random access memory in the monitored processor when the verification is passed, and judging the monitored processes to be abnormal when any of the region storing the specified function, the program flow, the instruction set and the question and answer communication mechanism is abnormal.

Description

处理器监控方法、装置及系统 The processor monitoring method, apparatus and system for

技术领域 FIELD

[0001] 本发明涉及数据监控领域,具体涉及处理器监控方法、装置及系统。 [0001] The present invention relates to data monitoring field, particularly relates to a processor monitoring method, apparatus and system.

背景技术 Background technique

[0002]目前,在自动化控制领域中,系统中的各种功能通常是通过处理器执行相应的函数实现的,当处理器的硬件或软件存在故障时,相应的功能必然会发生异常,为了保护处理器以及相关受控装置,目前的保护方式通常是在发生功能异常后,采取应急措施以减少损失,但是对于某些领域,现有的保护方式不能满足安全需求。 [0002] Currently, in the field of automatic control, the various functions of the respective systems is usually implemented with a function, when there is a hardware or software fault handler, the corresponding function abnormality occurs inevitably executed by the processor, in order to protect processor and associated controlled device, current protection dysfunction usually occurs after taking emergency measures to reduce the loss, but for some areas, existing protection methods can not meet the security requirements.

[0003] 例如对于混合动力汽车、纯电动等新能源汽车的电池管理系统(BATTERYMANAGEMENT SYSTEM,简称BMS),BMS中包含一个主板和多个从版,从板主要负责电池包内电池单体电压、电池温度信号的采集并通过内部CAN总线发送给主板,主板利用获取的电池组信息对动力电池进行评估、管理和保护,使动力电池可以满足整车使用环境。 [0003] For example, hybrid vehicles, electric vehicles and other new energy battery management system (BATTERYMANAGEMENT SYSTEM, referred to as BMS), BMS board and contains a plurality of release from the inner panel is responsible for the cell voltage of the battery pack, collecting the battery temperature signal and transmitted via the CAN bus internal to the motherboard, the motherboard using the acquired information of the battery pack of the power battery assessment, management and protection of the vehicle battery power to meet the use environment. 随着新能源汽车的快速发展,新能源汽车的销量不断增大,对新能源汽车的可靠性和安全性提出了越来越多的要求,对作为被业内称为新能源汽车电池的“大脑”的BMS的可靠性和安全性更是提出了更高的要求,按照现有的应急处理方式,当处理器存在故障导致功能异常时,可能会对硬件造成不可弥补的损失,尤其是对于BMS,甚至存在车辆安全隐患。 With the rapid development of new energy vehicles, sales of new energy vehicles is increasing, reliability and safety of new energy vehicles put ever-increasing demands of as "brain was known as the new energy automotive batteries reliability and security "of the BMS is put forward higher requirements, in accordance with existing emergency mode, when there is a fault handler lead to dysfunction, it might cause irreparable damage hardware, especially for BMS even in the presence of the vehicle safety hazard.

发明内容 SUMMARY

[0004] 为此,本发明所要解决的技术问题在于提高处理器的安全性。 [0004] To this end, the present invention is to solve the technical problem is to improve the security processor.

[0005] 本发明提供一种处理器监控方法,包括:对被监控处理器中的只读存储器和/或随机存储器进行校验;当所述校验通过时,对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域、所述指定函数的程序流、被监控处理器的指令集和问答通信机制中的至少一个进行监控;当所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,将所述被监控处理器判定为异常。 [0005] The present invention provides a method for monitoring a processor, comprising: a processor for monitoring the read-only memory and / or random access memory for verification; when the check by the processor to be monitored and / or the random access memory area for storing the specified function of the read-only memory, the program flow function specified, a set of instructions to monitor at least one of Q and communication mechanisms in the processor to be monitored; when the storage region designation function, program flow, an exception instruction set and any one of Q of communication mechanisms, the monitoring processor are determined to be abnormal.

[0006] 优选地,所述对被监控处理器中的只读存储器进行校验,包括:对所述被监控处理器中的只读存储器进行冗余校验得到校验码;将所述校验码与预设校验码进行比对;当所述校验码与预设校验码不相同时,返回至所述对所述被监控处理器中的只读存储器进行冗余校验得到校验码的步骤,当返回次数大于预设次数时,判定为校验失败;当所述校验码与预设校验码相同时,判定为校验通过。 [0006] Preferably, said processor being monitored to verify the read-only memory, comprising: monitoring the processor is a read-only memory redundancy check check code obtained; the correction parity check code with a preset code match; when the preset check code check code is not the same, it is returned to the monitor read-only memory for the processor to obtain a redundancy check step check code, when the number of returns is larger than a preset number, it is determined that the verification fails; when the preset check code and check code are the same, it is determined that the verification passes.

[0007] 优选地,所述对被监控处理器中的随机存储器进行校验,包括:向所述被监控处理器中的随机存储器中写入并读出数据;将写入的数据与独处的数据进行比对;当写入的数据与读出的数据不相同时,返回至所述向所述被监控处理器中的随机存储器中写入并读出数据的步骤,当返回次数大于预设次数时,判定为校验失败;当写入的数据与读出的数据相同时,判定为校验通过。 [0007] Preferably, said processor being monitored to verify the random access memory, comprising: monitoring processor random access memory and writing said read data to; the data to be written and alone data for comparison; when data is written to the data read out are not the same, return to the monitoring step is written in the random access memory and read data processor to said, when greater than a preset number of return when the number of times, it is determined that the verification fails; when data is written and read out the same data, it is determined that the verification passes.

[0008] 优选地,所述对被监控处理器中的所述只读存储器中存储指定函数的区域进行监控包括:对所述被监控处理器中的只读存储器中存储指定函数的区域进行冗余校验得到校验码;将所述校验码与预设校验码进行比对;当所述校验码与预设校验码不相同时,将所述随机存储器判定为异常。 [0008] Preferably, said monitoring comprises monitoring a processor region of the read-only memory storing the specified function: the region in the monitored processor is stored in a read only memory specified function is redundant It parity check code obtained; check code with the check code preset for comparison; when the preset check code check code are not identical, to the random access memory is determined to be abnormal.

[0009] 优选地,所述对被监控处理器中的所述随机存储器中存储指定函数的区域进行监控包括:当所述被监控处理器运行所述指定函数的过程中发生中断时,对寄存器中的数据求补得到第一补码; [0009] Preferably, said monitoring comprises monitoring region of the random access memory is stored in the processor designated function: When an interrupt occurs during the operation of the processor is to monitor the specified function, the register data obtained in the first complement complement;

[0010] 将所述第一补码存入所述随机存储器中; [0010] The first complement stored in the random access memory;

[0011] 在中断结束后,对所述第一补码求补得到第二补码; [0011] At the end of the interrupt, the first to obtain a second complement complement complement;

[0012] 判断所述第二补码与寄存器中的数据是否相等; [0012] determining whether the data of the second register and complement are equal;

[0013] 如果所述第二补码与寄存器中的数据不相等,则将所述随机存储器判定为异常。 [0013] If the second data complement register are not equal, a random access memory will be determined that the abnormality.

[0014] 优选地,对所述被监控处理器中的指定函数的程序流进行监控包括:将预设参数发送至所述被监控处理器;接收所述被监控处理器反馈的根据所述预设参数运行所述程序流的结果值;将所述结果值与预设结果值进行比对;当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指定函数的程序流判定为异常。 [0014] Preferably, the specified function of the monitored processor to monitor program flow comprises: transmitting the preset parameter to the processor to be monitored; monitoring receiving said feedback according to the pre-processor the set value of the operating parameter result in program flow; comparing the result value with a preset value for comparison result; the result when the result value and the preset value is not equal to the monitored processor program specifies the function of the stream is determined to be abnormal.

[0015] 优选地,对所述被监控处理器中的指令集进行监控包括:将预设参数和测试函数索引发送至所述被监控处理器;接收所述被监控处理器反馈的根据所述预设参数和所述测试函数索引执行测试函数的结果值,其中所述测试函数由所述被监控处理器的指令集组成;将所述结果值与预设结果值进行比对;当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指令集判定为异常。 [0015] Preferably, the processor is monitoring instruction set to monitor comprising: a test function and the preset parameter index is transmitted to the processor to be monitored; monitoring receiving said feedback processor according to the preset parameters and the test results of the index value performs a function of the test function, wherein the function test is monitored by the instruction set of the processor composition; the result value with a preset value for comparison result; when the results with the preset value of result values ​​are not equal, it will be monitoring the processor instruction set judged to be abnormal.

[0016] 优选地,对所述问答通信机制进行监控包括:向所述被监控处理器发送问题;接收所述被监控处理器反馈的答案以及对所述答案进行计数得到的第一答案数量;对所述被监控处理器反馈的答案进行计数得到第二答案数量;判断所述第一答案数量与所述第二答案数量是否相等;当所述第一答案数量与所述第二答案数量不相等时,将所述问答通信机制判定为异常。 [0016] Preferably, the communication mechanism Q monitor comprising: a processor to monitor the transmission problem; receiving said feedback monitoring processor answers the answers and the answer to the first counted number; the monitor processor being fed back answers counted number of second answer; determining whether the number of the first answer whether the answer is equal to the second number; if the answer to the first number and the second number does not answer equal, the communication mechanism Q is determined to be abnormal.

[0017] 优选地,所述被监控处理器是电池管理系统中的主处理器或从处理器,其中所述从处理器是对电池包内电池单体参数进行采集的处理器,所述主处理器是对所述从处理器进行管理的处理器,所述指定函数是所述电池管理系统的安全诊断函数。 [0017] Preferably, the processor is monitored by a battery management system from the main processor or a processor, wherein the parameter is a cell within the battery pack collected from the processor the processor, the main the processor is a processor from the managing processor, the designated function is a diagnostic function of the safety management system of the battery.

[0018] 优选地,当所述校验失败时,使所述被监控处理器断电。 [0018] Preferably, when the verification fails, the monitor processor is powered down.

[0019] 优选地,所述将所述被监控处理器判定为异常后,还包括:断开预充继电器、主正极继电器、主负极继电器,并使所述电池管理系统复位。 [0019] Preferably, the post processor to the monitor is determined to be abnormal, further comprising: a pre-charge relay is turned off, the main relay positive electrode, a negative electrode of the main relay, and the battery management system reset.

[0020] 本发明还提供另一种处理器监控方法,其应用于第一处理器和第二处理器,包括:所述第一处理器利用上述处理器监控方法监控所述第二处理器;所述第二处理器利用上述的处理器监控方法监控所述第一处理器。 [0020] The present invention further provides another method for monitoring a processor, which is applied to the first and second processors, comprising: a first processor, said processor using said second monitoring method for monitoring a processor; the second processor monitors the first processor using the processor monitoring method.

[0021] 优选地,所述第一处理器是电池管理系统中的主处理器,所述第二处理器是电池管理系统中的从处理器。 [0021] Preferably, the first processor is a battery management system in the master processor, the second processor is a battery management system from the processor.

[0022] 本发明还提供一种处理器监控方法,其应用于多个处理器,包括:所述多个处理器中的一个利用上述处理器监控方法监控所述多个处理器中的其他处理器。 [0022] The present invention also provides a method for monitoring a processor, which is applied to a plurality of processors, comprising: a processor monitoring method to monitor the above-described other processing by the plurality of processors of said plurality of processors device.

[0023] 相应地,本发明还提供一种处理器监控装置,包括:校验单元,用于对被监控处理器中的只读存储器和/或随机存储器进行校验;监控单元,用于在所述校验通过时对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域、所述指定函数的程序流、被监控处理器的指令集和问答通信机制中的至少一个进行监控;判定单元,用于在所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,将所述被监控处理器判定为异常。 [0023] Accordingly, the present invention further provides a processor monitoring apparatus, comprising: a checking unit, configured to monitor a processor to be read-only memory and / or random access memory for verification; monitoring unit for the the check being monitored and / or said random access memory area of ​​the processor in the read-only memory or storage when the function specified by the specifying function program stream, the processor instruction set and monitor at least one monitoring communication mechanisms Q; determining means, for storing in said region designated function, program flow, an exception instruction set and any one of Q of communication mechanisms, the processor is determined to be abnormal to be monitored .

[0024] 优选地,所述校验单元包括:校验码计算子单元,用于对所述被监控处理器中的只读存储器进行冗余校验得到校验码;比对子单元,用于将所述校验码与预设校验码进行比对;第一判定子单元,用于当所述校验码与预设校验码不相同时,返回至所述对所述被监控处理器中的只读存储器进行冗余校验得到校验码的步骤,当返回次数大于预设次数时,判定为校验失败;第二判定子单元,用于当所述校验码与预设校验码相同时,判定为校验通过。 [0024] Preferably, the check unit comprises: checksum calculating sub-unit, configured to monitor the processor is a read only memory to obtain redundancy check code check; ratio of the subunit, with to the check code with a predetermined check code for comparison; first determination sub-unit, configured to, when said check code with a predetermined check code is not the same, are returned to the monitoring of the processor redundancy check step ROM check code obtained, when the number of returns is larger than a preset number, it is determined that the verification fails; second determining sub-unit, configured to, when the pre-check code provided the same checksum, the checksum is determined by.

[0025] 优选地,所述校验单元包括:读写子单元,用于向所述被监控处理器中的随机存储器中写入并读出数据;比对子单元,用于将写入的数据与独处的数据进行比对;第一判定子单元,用于当写入的数据与读出的数据不相同时,返回至所述向所述被监控处理器中的随机存储器中写入并读出数据的步骤,当返回次数大于预设次数时,判定为校验失败;第二判定子单元,用于当写入的数据与读出的数据相同时,判定为校验通过。 [0025] Preferably, the check unit comprises: a reading and writing sub-unit for writing and reading data processor to said random access memory to be monitored; specific sub-unit for writing the data and data alone for comparison; first determination sub-unit, configured to, when data writing and data reading are not the same, the return to be monitored in the random access memory in the processor to the write and the step of reading data, when the number of returns is larger than a preset number, it is determined that the verification fails; second determining sub-unit, configured to, when data writing and data reading are the same, it is determined that the verification passes.

[0026] 优选地,所述监控单元包括:校验码计算子单元,用于对所述被监控处理器中的只读存储器中存储指定函数的区域进行冗余校验得到校验码;比对子单元,用于将所述校验码与预设校验码进行比对;判定子单元,用于当所述校验码与预设校验码不相同时,将所述随机存储器判定为异常。 [0026] Preferably, the monitoring unit comprises: checksum calculating sub-unit, configured to monitor the area of ​​the processor is stored in read-only memory specified function to obtain redundancy check code check; ratio sub-unit, the check code and check code for preset for comparison; determining subunit, configured to, when the predetermined check code and check code are not identical, the determined random access memory as abnormal.

[0027] 优选地,所述监控单元包括:第一补码计算子单元,用于当所述被监控处理器运行所述指定函数的过程中发生中断时,对寄存器中的数据求补得到第一补码; [0027] Preferably, the monitoring unit comprises: a first calculating subunit complement, for when an interrupt occurs when the monitored processor to execute the function specified in the process, the data register to obtain the complement of a complement;

[0028] 补码存储子单元,用于将所述第一补码存入所述随机存储器中; [0028] Complement storage sub-unit, configured to complement the first code stored in the random access memory;

[0029] 第二补码计算子单元,用于在中断结束后,对所述第一补码求补得到第二补码; [0029] Complement second calculating subunit, configured After the interrupt, the first to obtain a second complement complement complement;

[0030] 判断子单元,用于判断所述第二补码与寄存器中的数据是否相等; [0030] The determination subunit, determines the second data register and complement for equality;

[0031] 判定子单元,用于当所述第二补码与寄存器中的数据不相等时,将所述随机存储器判定为异常。 When the [0031] determination sub-unit, when data for the second complement register are not equal, the random access memory is determined to be abnormal.

[0032] 优选地,所述监控单元包括:发送子单元,用于将预设参数发送至所述被监控处理器;接收子单元,用于接收所述被监控处理器反馈的根据所述预设参数运行所述程序流的结果值;比对子单元,用于将所述结果值与预设结果值进行比对;判定子单元,用于当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指定函数的程序流判定为异常。 [0032] Preferably, the monitoring unit comprises: a sending subunit, configured to send to the preset parameter is the supervisory processor; receiving subunit, configured to receive the feedback to be monitored according to the pre-processor the results of the run program stream parameter set value; ratio of the subunit, the result for a result value with a preset value for comparison; determining subunit, configured to, when the result value and the preset value results when not equal, the designated function is to monitor the processor program flow is determined to be abnormal.

[0033] 优选地,所述监控单元包括:发送子单元,用于将预设参数和测试函数索引发送至所述被监控处理器;接收子单元,用于接收所述被监控处理器反馈的根据所述预设参数和所述测试函数索引执行测试函数的结果值,其中所述测试函数由所述被监控处理器的指令集组成;比对子单元,用于将所述结果值与预设结果值进行比对;判定子单元,用于当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指令集判定为异常。 [0033] Preferably, the monitoring unit comprises: a sending subunit, configured to preset parameters and test functions to be monitored is transmitted to the index processor; receiving subunit, configured to receive the monitor processor being fed back the result of the preset value of the index parameter and the test function execution function test, wherein the test function is monitored by the processor's instruction set of the composition; ratio of the subunit, the result value for the pre- set value comparison result; determining subunit, configured to, when the result value and the preset value is not equal to the result, the monitor processor is the instruction set is determined to be abnormal.

[0034] 优选地,所述监控单元包括:发送子单元,用于向所述被监控处理器发送问题;接收子单元,用于接收所述被监控处理器反馈的答案以及对所述答案进行计数得到的第一答案数量;计数子单元,用于对所述被监控处理器反馈的答案进行计数得到第二答案数量;判断子单元,用于判断所述第一答案数量与所述第二答案数量是否相等;判定子单元,用于当所述第一答案数量与所述第二答案数量不相等时,将所述问答通信机制判定为异常。 [0034] Preferably, the monitoring unit comprises: a sending subunit, is for the processor to monitor the transmission problem; receiving subunit, configured to receive the processor to be monitored, and the answer feedback answers the first answer to the counted number; counting subunit, for the feedback processor monitored by counting the number of answers to a second answer; determining subunit, for determining the number of answers to the first and the second the number of answers are equal; determining subunit, configured to, when said first number and said second answer is not equal to the number of answers, the questions and answers communication mechanism determined to be abnormal.

[0035] 优选地,所述被监控处理器是电池管理系统中的主处理器或从处理器,其中所述从处理器是对电池包内电池单体参数进行采集的处理器,所述主处理器是对所述从处理器进行管理的处理器,所述指定函数是所述电池管理系统的安全诊断函数。 [0035] Preferably, the processor is monitored by a battery management system from the main processor or a processor, wherein the parameter is a cell within the battery pack collected from the processor the processor, the main the processor is a processor from the managing processor, the designated function is a diagnostic function of the safety management system of the battery.

[0036] 优选地,当所述验失败时,使所述被监控处理器断电。 [0036] Preferably, when the test fails, the monitor processor is powered down.

[0037] 优选地,所述处理器监控装置还包括:应急处理单元,用于在将所述被监控处理器判定为异常后,断开预充继电器、主正极继电器、主负极继电器,并使所述电池管理系统复位。 [0037] Preferably, said apparatus further comprising monitoring the processor: emergency unit for monitoring by the processor is determined to be abnormal, the precharge relay OFF, the main relay positive electrode, a negative electrode of the main relay, and the battery management system reset.

[0038] 本发明还提供一种处理器监控系统,包括第一处理器和第二处理器;所述第一处理器作为上述处理器监控装置监控所述第二处理器;所述第二处理器作为上述处理器监控装置监控所述第一处理器。 [0038] The present invention further provides a processor control system including a first processor and a second processor; processor, the first processor as the monitoring device for monitoring said second processor; the second process said processor as said first monitoring means monitoring processor.

[0039] 优选地,所述第一处理器是电池管理系统中的主处理器,所述第二处理器是电池管理系统中的从处理器。 [0039] Preferably, the first processor is a battery management system in the master processor, the second processor is a battery management system from the processor.

[0040] 本发明还提供另一种处理器监控系统,包括多个处理器:所述多个处理器中的一个作为上述处理器监控装置监控所述多个处理器中的其他处理器。 [0040] The present invention further provides another processor monitoring system, a plurality of processors comprising: a plurality of processors of the processor as the monitoring device for monitoring said plurality of processors other processors.

[0041] 与现有技术相比,本发明例提供的处理器监控方法、装置及系统,可以通过对被监控处理器的存储器进行校验以,并对存储器中存储指定函数的区域、指定函数的程序流、被监控处理器的指令集和问答通信机制中的一个或多个进行循环监控,可以根据校验和监控的结果判断出被监控处理器的状态,进而可以提高被监控处理器的安全性。 [0041] Compared with the prior art, a processor monitoring method, apparatus, and system provided by the invention, it can be monitored by the processor to the memory checker, and stored in a memory region specified functions specified function program stream, one or more sets of instructions to be monitored and Q processor communication mechanisms circulating in the monitor can determine the status of the processor to be monitored according to a result of verification and monitoring, further monitoring of the processor can be improved safety.

附图说明 BRIEF DESCRIPTION

[0042] 为了使本发明的内容更容易被清楚的理解,下面根据本发明的具体实施例并结合附图,对本发明作进一步详细的说明,其中 [0042] In order to make the present invention understood more readily apparent, according to the following particular embodiments of the invention taken in conjunction with the accompanying drawings, the present invention will be further described in detail, wherein

[0043] 图1是本发明第一实施例提供的处理器监控方法的流程图; [0043] FIG. 1 is a flowchart of a method for monitoring a processor according to a first embodiment of the present invention;

[0044] 图2是本发明第三实施例提供的处理器监控装置的结构示意图; [0044] FIG. 2 is a schematic structural diagram of a processor provided in the monitoring device of the third embodiment of the present invention;

[0045]图3是本发明第四实施例提供的处理器监控系统的结构示意图。 [0045] FIG. 3 is a schematic structural diagram of a processor monitoring system according to a fourth embodiment of the present invention.

具体实施方式 detailed description

[0046] 本发明第一实施例提供一种处理器监控方法,该方法可以由监控处理器执行,如图1所示该方法包括如下步骤: [0046] The first embodiment of the present invention provides a method for monitoring a processor, the method may be performed by the monitor processor, the method shown in FIG. 1 comprising the steps of:

[0047] SI,对被监控处理器中的只读存储器和/或随机存储器进行校验,该操作可以在被监控处理器处于空闲的状态下执行,例如在系统初始化的过程中。 [0047] SI, the processor being monitored on read-only memory and / or random access memory for verification, the operations may be performed in a state of the monitored processor is idle, for example, in the system initialization process. 其目的在于判断只读存储器和/或随机存储器是否损坏。 Determining whether an object of a read-only memory and / or random access memory damage. 校验存储硬件的方法有多种,现有的对存储类硬件进行检测和校验的方法都是可行的。 There are many method for checking storage hardware, the conventional method for hardware-based detection and storage are possible verification. 优选地,本实施例对上述两个存储器均进行校验,并且不限定校验的顺序,既可以先校验其中一个存储器,再校验另一个存储器,也可以同时校验。 Preferably, the above-described embodiment of the present embodiment are two memory for verification, and the verification order is not limited, either one of the first memory check, then another memory check, the check may be simultaneously. 为了提高校验速度,实际应用中也可以只校验只读存储器和随机存储器中的一个。 In order to increase the speed of calibration, practical applications may only check a read only memory and a random access memory. 当校验通过时执行步骤S2,当校验失败时可以将被监控处理器判定为异常。 When the verification by performing the step S2, when the validation fails to monitor the processor may be determined to be abnormal.

[0048] S2,当所述校验通过时(被校验的存储器未损坏),对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域(被监控处理器执行指定函数时,会将相关数据存储到只读存储器和/或随机存储器的固定区域中,在执行本方法之前,本领域技术人员可以得知指定函数会被存储到哪些固定的区域中,例如可以得知固定的存储地址;指定函数例如可以是由被监控处理器执行的与安全控制相关的函数、主要功能函数等函数,可以根据需要选择关注的函数)、所述指定函数的程序流(由指定函数组成的程序流,程序流中至少包括一个指定函数)、被监控处理器的指令集和问答通信机制中的至少一个进行循环监控,即上述监控操作可以在被监控处理器处于正常工作的状态下反复执行,上述四种监控不存在依赖关系,可以执行其中的一种或 [0048] S2, when the check is passed (the undamaged parity memory), and / or the random access memory area of ​​the memory of the processor to be monitored in the read-only memory or the specified function ( monitored processor performing a specified function, will store data related to a read only memory and / or a fixed region in random access memory, prior to performing the method, those skilled in the art can specify that the function which will be stored in a fixed region, for example, that a fixed memory address; specified function, for example, may be controlled by a function related to security monitoring processor being executed, the main function of functions like function, the function of interest can be selected as needed), the designated function program stream (program specified function of the composition of the stream, the program stream comprises at least a specified function), at least one cycle of monitoring instruction set to monitor the communication mechanism Q and processor, i.e., the above-described monitoring operation in the monitoring process can be in a normal operating state is repeatedly executed, the above-described four kinds of monitoring dependencies do not exist, or one of them may be performed 种,当执行多种监控时,可以采用多种方式来执行,例如可以顺序执行、同步或异步执行、甚至可以多种监控中断间隔执行。 Species, when performing a variety of monitoring may be performed in various ways, for example, may be performed sequentially, synchronous or asynchronous execution, even more interrupt monitoring intervals. 当监控结果正常时,表示被监控处理器状态正常,继续执行步骤S2 ;当所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,执行步骤S3。 When normal monitoring result indicates the normal state of the monitored processor, proceed to step S2; when the storage area designated function, program flow, and the instruction set Q communication mechanism according to any one exception, a step S3.

[0049] S3,将所述被监控处理器判定为异常。 [0049] S3, the monitor processor is determined to be abnormal.

[0050] 根据本发明实施例提供的处理器监控方法,通过对被监控处理器的存储器进行校验以及对存储器中存储指定函数的区域、指定函数的程序流、被监控处理器的指令集和问答通信机制中的一个或多个进行循环监控,可以根据校验和监控的结果判断出被监控处理器的状态,进而可以提高被监控处理器的安全性。 [0050] The processor monitoring method according to an embodiment of the present invention, and by checking the program stream stored in the memory area specified function specified function of the monitored processor to a memory, the processor instruction set and monitor Q communication mechanisms to monitor one or more of cycles can be determined by monitoring the state of the processor based on the results of the verification and monitoring, in turn, can improve the safety of the monitored processor.

[0051] 具体地,对只读存储器和随机存储器进行校验的方法有多种,本实施例提供一种具体的校验方法,即上述步骤Si中所述对被监控处理器中的只读存储器进行校验可以包括: [0051] Specifically, there are several ways of read-only memory and random access memory for verification, provides a particular verification method according to the present embodiment, i.e., Si in the above step of the read-only monitored processor verify the memory may include:

[0052] 对所述被监控处理器中的只读存储器进行冗余校验(Cyclical RedundancyCheck,CRC)得到校验码; [0052] the monitor processor being a read-only memory redundancy check (Cyclical RedundancyCheck, CRC) check code obtained;

[0053] 将所述校验码与预设校验码进行比对,预设校验码可以是预先存入监控方的,也可以是监控方利用与被监控方同样的校验算法进行计算得到的; [0053] The check code with a predetermined check code for comparison, a predetermined checksum may be previously stored in the monitor side, or may be calculated using the monitor side with the same checksum algorithm monitor side owned;

[0054] 当所述校验码与预设校验码不相同时,返回至所述对所述被监控处理器中的只读存储器进行冗余校验得到校验码的步骤,当返回次数大于预设次数时,判定为校验失败,假设预设次数为n,那么如果从第一比对开始连续η次出现比对结果不相同的情况,则判定为校验失败。 [0054] When the check code and the check code is not the same as the default, returns a read only memory to the processor to be monitored in step redundancy check code obtained for the check, when the number of return when greater than a preset number of times, it is determined that the verification fails, it is assumed for the preset number of times n, then verification fails if a first start continuous η times than the comparison result is not the same situation, it is determined from the.

[0055] 当所述校验码与预设校验码相同时,判定为校验通过,即在η次之内出现比对结果相同的情况,则判定为校验通过。 [0055] When the check code with a predetermined check code are the same, it is determined by calibration, i.e., the ratio of the outcome of the same, it is determined that the check followed by the appearance in η.

[0056] 上述步骤SI中所述对被监控处理器中的随机存储器进行校验可以包括: [0056] In the above-described step SI monitored processor to random access memory may be verified comprising:

[0057] 向所述被监控处理器中的随机存储器中写入并读出数据; [0057] The monitored data is read and written to said random access memory in the processor;

[0058] 将写入的数据与独处的数据进行比对。 [0058] Data with the data to be written alone for comparison. 例如对随机存储器的空间全部写入0,然后再对其进行读出操作,判断读出的数据是否全为O ; Random access memory space, for example writing all 0, then its read operation, determines whether the data read out of the whole is O;

[0059] 当写入的数据与读出的数据不相同时,返回至所述向所述被监控处理器中的随机存储器中写入并读出数据的步骤,当返回次数大于预设次数时,判定为校验失败;假设预设次数为η,即如果从第一次开始连续η次出比对结果不相同的情况,则判定为校验失败。 [0059] When data is written to the data read out are not the same, return to the monitoring step is written in the random access memory and read data processor to said, when the preset number is greater than the number of return , it is determined that the verification fails; [eta] is assumed for the preset number of times, i.e., if [eta] in a row from the first start time the comparison results are not identical, it is determined that the verification fails.

[0060] 当写入的数据与读出的数据相同时,判定为校验通过,即在η次之内出现比对结果相同的情况,则判定为校验通过。 [0060] When data is written to the data read are the same, is determined by calibration, i.e., the same situation occurs in the comparison results η followed, it is determined that the check is passed.

[0061] 本实施例提供一种具体的对被监控处理器中的所述只读存储器中存储指定函数的区域进行循环监控的方法,即上述步骤S2可以包括: [0061] The present embodiment provides a method for monitoring the circulating specific region being monitored in the processor stores the read only memory specified function, i.e., Step S2 may include:

[0062] 对所述被监控处理器中的只读存储器进行冗余校验得到校验码; [0062] the monitored processor to obtain a read-only memory check code redundancy check;

[0063] 将所述校验码与预设校验码进行比对; [0063] The check code with a predetermined check code for comparison;

[0064] 当所述校验码与预设校验码不相同时,将所述随机存储器判定为异常。 [0064] When the check code and the check code is not the same as a preset, the random access memory is determined to be abnormal. 与上述步骤SI中所述对被监控处理器中的只读存储器进行校验的具体方法不同的是,在循环监控过程中,只要出现一次比对结果不相同的情况立即将随机存储器判定为异常。 And specific methods described in the above step SI verify the monitored processor read-only memory is different, in the monitoring process cycle, as long as a comparison result is not the same situation immediately determined to be abnormal random access memory .

[0065] 被监控处理器运行上述指定函数的过程中,发生中断时会将当前各个寄存器的内容存入随机存储器的堆栈区;中断结束后,会重新读出随机存储器的数据(中断结束后的现场恢复过程)。 [0065] The operation of the above process is designated function monitoring processor, the current contents of each register will be stored in random access memory stack area when the interrupt occurs; after the interruption is over, will re-read the data random access memory (after the end of the interrupt site recovery process). 在此过程中可以对随机存储器进行监控,即上述步骤S2中所述对被监控处理器中的所述随机存储器中存储指定函数的区域进行循环监控包括:当所述被监控处理器运行上述指定函数的过程中发生中断时,对寄存器中的数据求补得到第一补码var_ram_cplo此过程中,由于寄存器中的数据被写入到随机存储器的堆栈区中,假设用var_reg表示寄存器中的数据,用var_ram表示随机存储器堆栈区中的数据,所以var_reg应当等于var_ram0 In this process it can be monitored random access memory, i.e., the above-described step S2 to monitor the circulating region comprises the random access memory is stored in the processor to monitor specified functions of: the processor to execute the designated monitored when when an interrupt occurs during a function, the data register to obtain a first complementing complement var_ram_cplo this process, since the data register is written into the stack area of ​​RAM, it is assumed the register with data representing var_reg, data RAM stack area indicated by var_ram, it should be equal var_ram0 var_reg

[0066] 关于补码,在计算机数据处理领域中,正数的补码为其本身,负数的补码是除符号位外,所有位取反(即原码的反码),然后+1(简称为求反加一)。 [0066] For complement, in the field of computer data processing, complement positive number for itself, complement is negative except the sign bit, all the bits (i.e., the original code of the anti-code), and +1 ( referred to as the negation plus one). 如:-1101的补码为-0011。 Such as: -1101 -0011 complement code.

[0067] 将第一补码Var_ram_Cpl存入所述随机存储器中,具体的存储区域通常是预设的; [0067] The first complement Var_ram_Cpl stored in said random access memory, a specific storage area is usually preset;

[0068] 在中断结束后,被监控处理器会将var_ram拷贝给var_reg(从随机存储器中读出数据写入寄存器);此时对第一补码var_ram_cpl求补得到第二补码,第二补码应当等于var_reg (对数据的补数求补结果应当等于原数据); [0068] At the end of the interrupt, the processor will be monitored var_ram copy to var_reg (read data from the random access memory write register); this time to obtain a second complement of the first complement var_ram_cpl complementing second complementary code should be equal var_reg (complement data of the complemented result should be equal to the original data);

[0069] 判断所述第二补码与寄存器中的数据是否相等,即判断var_ram_cpl的补码是否等于var_reg ; [0069] Analyzing the data with the complement of the second register are equal, i.e. determination of complement is equal var_ram_cpl var_reg;

[0070] 如果所述第二补码与寄存器中的数据不相等,则将所述随机存储器判定为异常。 [0070] If the second data complement register are not equal, a random access memory will be determined that the abnormality.

[0071] 上述优选方案实现了对随机存储器的堆栈区的监控,在处理器运行指定函数时如果发生了中断,可以通过上述操作来检测中断处理过程中存储在堆栈里的数据是否可靠。 [0071] The preferred embodiment implements stack area monitoring of the random access memory when the processor is running at the specified function if the interrupt occurs, an interrupt can be detected if the data processing is stored on the stack by the above-described reliable operation.

[0072] 本实施例提供一种具体的对所述被监控处理器中的指定函数的程序流进行循环监控的方法,即上述步骤S2可以包括: [0072] One particular embodiment provides the program for the specified function of the monitored processor is circulated flow monitoring method of the present embodiment, i.e., Step S2 may include:

[0073] 将预设参数发送至所述被监控处理器。 [0073] The preset parameters to be monitored is transmitted to the processor. 被监控处理器接收到预设参数后将根据该预设参数执行指定函数并得出结果值,即预设参数作为输入数据,结果值为输出数据。 Is received after the preset parameter monitor processor performs the specified function in accordance with predetermined parameters and the results obtained values, i.e., preset parameters as input data, output data is the result.

[0074] 接收所述被监控处理器反馈的根据所述预设参数运行所述程序流的结果值; [0074] The processor receives said monitored result of the preset value of the feedback operation of the program stream parameter;

[0075] 将所述结果值与预设结果值进行比对,预设结果值为理论值; [0075] The results of the result value with a preset value for comparison, the result is a preset theoretical values;

[0076] 当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指定函数的程序流判定为异常。 [0076] When the result value with the preset value is not equal result, the designated function is to monitor the processor program flow is determined to be abnormal.

[0077] 实际应用中的程序流通常包括多个函数,正常情况下多个函数应当均被执行,并且应当符合一定的执行顺序,如果有函数未被执行或者执行顺序发生错误,则得出的结果与预设的理论结果不相同,上述方案可以根据结果值判断出程序流是否存在错误,进一步提尚可靠性和安全性。 [0077] The practical application of the program flow typically comprises a plurality of functions, a plurality of function should normally are executed, and should meet certain execution order, if the function is not performed or the order of execution error occurs, the resulting the results are not identical to the preset theoretical results, the above-described embodiment can determine whether an error exists the program flow, still further improved reliability and safety according to the result value.

[0078] 本实施例提供一种具体的对所述被监控处理器中的指令集进行循环监控的方法,即上述步骤S2可以包括: [0078] The present embodiment provides a method for the specific instruction set processors are monitored in monitoring circulating, i.e., Step S2 may include:

[0079] 将预设参数和测试函数索引发送至所述被监控处理器; [0079] The preset parameters and test functions to be monitored is transmitted to the index processor;

[0080] 接收所述被监控处理器反馈的根据所述预设参数和所述测试函数索引执行测试函数的结果值,其中所述测试函数由所述被监控处理器的指令集组成; [0080] The processor receives said monitored result of the feedback the preset value of the parameter index and the test function execution function test, wherein the test function is monitored by the processor's instruction set composition;

[0081] 将所述结果值与预设结果值进行比对; [0081] The result value with a preset value for comparison result;

[0082] 当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指令集判定为异常。 [0082] When the result value with the preset value is not equal result, the monitored processor instruction set judged to be abnormal.

[0083] 实际应用中,可以将被监控处理器中的指定函数单独拷贝至特定的内存模块中,得到所述指定函数的镜像函数,指令集监控可以基于预先在所述镜像函数中设置的测试函数之上执行,上述方案可以利用测试函数监控处理器的指令集是否正常,进一步提高可靠性和安全性。 [0083] In practical applications, can be monitored separately specified function processor copied to a specific memory module, the function of the mirror image of the specified function, the instruction set may be based on monitoring the test set in advance in the image function function performed on the program instruction set may be utilized to test whether the function of normal monitoring processors, to further improve the reliability and security.

[0084] 本实施例提供一种具体的对所述问答通信机制进行监控的方法,即上述步骤S2可以包括: [0084] The present embodiment provides a specific mechanism for monitoring the Q communication method of embodiment, i.e., Step S2 may include:

[0085] 向所述被监控处理器发送问题,问题可以是一组测试数据,被监控处理器接收到问题后会根据问题生成答案,并且可以自我判断生成的答案是否正确(预存正确答案,用生成的答案与其进行比对),从而可以对答案进行计数生成第一答案数量,计数可以针对正确答案和/或错误的答案,例如起始计数为0,当生成正确答案时增加1、生成错误答案时减少L. [0085] is sent to the processor to monitor the problem, the problem may be a set of test data, the processor being monitored is generated after receiving a question to answer the questions, and may generate a self-judgment answer is correct (the pre-stored correct answer, with generating answer aligned therewith), thereby generating a counted number answers first answer count may, for example, the starting count is 0, is incremented by 1 when generating the correct answer for the correct answers and / or wrong answer, an error when the answer to reducing L.

[0086] 接收所述被监控处理器反馈的答案以及对所述答案进行计数得到的第一答案数量; [0086] processor receiving said monitoring and feedback answers the number of answers of the first answer counted;

[0087] 对所述被监控处理器反馈的答案进行计数得到第二答案数量,即监控方收到被监控方反馈的上述数据后,对被监控处理器反馈的答案进行判断(预存正确答案,用接收到的答案与其进行比对),并统计答案的数量得到第二答案数量,统计的规则应当与被监控处理器一致; After [0087] the feedback processor is monitored by counting the number of answers to answer the second, i.e. receiving the data monitor side is fed back side of the monitor, to be fed back to the processor to monitor the answer to the determination (pre-stored correct answer, with the number of received answer is aligned therewith), and counting a second number of answers to give answers, the rules should be consistent with the statistics processor being monitored;

[0088] 判断所述第一答案数量与所述第二答案数量是否相等; [0088] It is determined whether the answer to the first number and the second number is equal to the answer;

[0089] 当所述第一答案数量与所述第二答案数量不相等时,则表示双方对答案的统计不一致,所以可能是在问答过程中某一方丢失了数据,因此可以判断问答机制为异常。 [0089] When the answer to the first number of the number of the second answer are not equal, it means that both the statistics of the answers are inconsistent, it may either be lost in the course of the Q data Q mechanism can be determined to be abnormal .

[0090] 上述处理器监控方法可以应用于电池管理系统中,即所述被监控处理器是电池管理系统中的主处理器或从处理器,其中所述从处理器是对电池包内电池单体参数进行采集的处理器,所述主处理器是对所述从处理器进行管理的处理器,所述指定函数是所述电池管理系统的安全诊断函数。 [0090] The method may be applied to the processor to monitor a battery management system, i.e. the monitored processor is a master battery management system from the processor or the processor, wherein said single cell within the battery pack to the processor body parameter acquisition processor, the master processor is a processor from the managing processor, the designated function is a diagnostic function of the safety management system of the battery.

[0091] 本领域技术人员可以理解,电池管理系统中包括一个主板和多个从板,上述主处理器即为主板上的处理器,上述从处理器为从板上的处理器。 [0091] Those skilled in the art will be appreciated, the battery management system includes a main board and a plurality of panels from the main processor is the processor on board the slave processor from the processor board. 另外,电池管理系统中包括多种功能函数,例如对电池参数进行采集的函数、通信函数等,现有的电池管理系统已经设置了各个处理器自身执行的对这些功能函数进行安全诊断的函数,本方法所述的指定函数可以是所述安全诊断函数,由此可以进一步提高安全监控的可靠性,进而提高电池管理系统的安全性。 Further, a battery management system includes a plurality of performance function, for example, a function of battery parameters, and other communication functions acquisition, a conventional battery management system has been set as a function of these security features diagnostic functions performed by the respective processor itself, the method according to the present function may be specified diagnostic function of the safety, reliability can be further increased safety monitoring, thereby improving battery safety management systems.

[0092] 上述步骤SI可以在电池管理系统的初始化过程中执行,当所述验失败时,可以使所述被监控处理器断电,进而禁止电池管理系统启动,以确保整车的安全性。 [0092] The above steps may be performed during initialization SI battery management system, when the test fails, the monitoring processor can be the power, the battery management system further prohibit activated to ensure the safety of the vehicle.

[0093] 上述步骤S2-S3可以在电池管理系统的正常运行程中执行,在将所述被监控处理器判定为异常后,还可以包括: [0093] The above-described steps S2-S3 may be performed during normal operation of the battery management system process, after the monitoring processor is determined to be abnormal, it may further comprise:

[0094] 断开预充继电器、主正极继电器、主负极继电器,并使所述电池管理系统复位,上述操作作为一种应急手段,即在被监控处理器异常时,可以通过上述操作电池断电,以对电池进行保护。 [0094] The pre-charge relay is turned off, the main relay positive electrode, a negative electrode of the main relay, and the battery management system reset, the above-described operation as an emergency means, i.e. the monitored processor exceptions, the above-described operation may be powered by a battery to protect the battery.

[0095] 本发明第二实施例还提供一种处理器监控方法,其应用于第一处理器和第二处理器,该方法包括: [0095] The second embodiment of the present invention further provides a method for monitoring a processor, which is applied to the first and second processors, the method comprising:

[0096] 所述第一处理器利用上述第一实施例提供的处理器监控方法监控所述第二处理器; [0096] The first processor is provided by the first embodiment of the method of monitoring processor monitors the second processor;

[0097] 所述第二处理器利用上述第一实施例提供的处理器监控方法监控所述第一处理器。 [0097] The second processor using the first embodiment provides a method for monitoring processor monitors the first processor.

[0098] 上述两个处理器采用相同的处理器监控方法相互监控,由于监控方与被监控方不是同一硬件,所以该监控方式的可靠性较高。 [0098] The two processors use the same processor monitoring method to monitor each other, since the monitor side with the monitoring party is not the same hardware, so the higher the reliability of the monitoring method.

[0099] 对于处理器多于两个的系统,系统中的多个处理器中的一个可以利用上述第一实施例提供的处理器监控方法监控所述多个处理器中的其他处理器。 [0099] For more than two processor systems, a plurality of processors in the system in a first embodiment described above may be utilized to provide a method for monitoring processor monitors other processors of the plurality of processors.

[0100] 上述处理器监控方法可以应用于电池管理系统中,其中所述第一处理器是电池管理系统中的主处理器,所述第二处理器是电池管理系统中的从处理器,并且电池管理系统中通常包括一个主处理器(第一处理器)和多个从处理器(第二处理器)。 [0100] The method may be applied to the processor to monitor a battery management system, wherein said first processor is a master battery management system processor, the second processor is a battery management system from the processor, and a battery management system typically comprises a main processor (the first processor) and a plurality of slave processor (the second processor). 本方法可以基于电池管理系统已有的硬件架构进行监控,只需要对电池管理系统进行软件上的改进,不需要增加监控芯片,由此可以降低成本。 The method may be based on a battery management system to monitor the existing hardware architecture, only the battery management system software improvements without increasing monitoring chip, whereby cost can be reduced. 利用其中一个从板内的处理器作为监控处理器与主板内的处理器实现相互监控,由于主板与从板之间使用CAN总线通信,所以可以保证监控过程中数据的传输效率与可靠性。 Wherein each implemented using a processor to monitor a monitor processor on the motherboard and from the processor in the plate, and due to the motherboard using the CAN bus communication from between the plates, it is possible to ensure the transmission efficiency and reliability of the monitoring process the data.

[0101] 本发明第三实施例提供一种处理器监控装置,如图2所述该装置包括: [0101] The third embodiment of the present invention provides a processor monitoring apparatus, the apparatus comprising the FIG. 2:

[0102] 校验单元21,用于对被监控处理器中的只读存储器和/或随机存储器进行校验; [0102] checking unit 21, for checking the monitored processor to a read-only memory and / or random access memory;

[0103] 监控单元22,用于在所述校验通过时对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域、所述指定函数的程序流、被监控处理器的指令集和问答通信机制中的至少一个进行监控; Program [0103] The monitoring unit 22 is configured to, when the check by the monitored and / or said random access memory area of ​​the read-only memory or stored in the processor of the specified function, the designated function flow, and the instruction set Q communication mechanism to be monitored at least one processor to monitor;

[0104] 判定单元23,用于在所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,将所述被监控处理器判定为异常。 [0104] determination unit 23, the storage area for the designated function, program flow, an exception is any set of instructions and Q communication mechanisms, the monitor processor being determined to be abnormal.

[0105] 根据本发明实施例提供的处理器监控装置,通过对被监控处理器的存储器进行校验以及对存储器中存储指定函数的区域、指定函数的程序流、被监控处理器的指令集和问答通信机制中的一个或多个进行循环监控,可以根据校验和监控的结果判断出被监控处理器的状态,进而可以提高被监控处理器的安全性。 [0105] The processor monitoring device according to an embodiment of the present invention, and by checking the program stream stored in the memory area specified function specified function of the monitored processor memory, an instruction set of the processor and monitor Q communication mechanisms to monitor one or more of cycles can be determined by monitoring the state of the processor based on the results of the verification and monitoring, in turn, can improve the safety of the monitored processor.

[0106] 优选地,所述校验单元21可以包括: [0106] Preferably, the check unit 21 may include:

[0107] 校验码计算子单元,用于对所述被监控处理器中的只读存储器进行冗余校验得到校验码; [0107] checksum calculation sub-unit, configured to monitor the processor is a read only memory to obtain redundancy check code check;

[0108] 比对子单元,用于将所述校验码与预设校验码进行比对; [0108] than the subunit, for the check code with a predetermined check code for comparison;

[0109] 第一判定子单元,用于当所述校验码与预设校验码不相同时,返回至所述对所述被监控处理器中的只读存储器进行冗余校验得到校验码的步骤,当返回次数大于预设次数时,判定为校验失败; [0109] a first determining subunit, configured to, when said check code with a predetermined check code is not the same, return a read only memory to the processor to be monitored is obtained the correction redundancy check the step of check code, when the number of returns is larger than a preset number, it is determined that the verification fails;

[0110] 第二判定子单元,用于当所述校验码与预设校验码相同时,判定为校验通过。 [0110] The second determining sub-unit, configured to, when said check code with a predetermined check code are the same, it is determined that the verification passes.

[0111] 优选地,所述校验单元21可以包括: [0111] Preferably, the check unit 21 may include:

[0112] 读写子单元,用于向所述被监控处理器中的随机存储器中写入并读出数据; [0112] write subunit, configured to write and read data of said monitored random access memory in the processor;

[0113] 比对子单元,用于将写入的数据与独处的数据进行比对; [0113] than the sub-unit, with the data for the data to be written alone for comparison;

[0114] 第一判定子单元,用于当写入的数据与读出的数据不相同时,返回至所述向所述被监控处理器中的随机存储器中写入并读出数据的步骤,当返回次数大于预设次数时,判定为校验失败; [0114] a first step of determining sub-unit, configured to, when data writing and data reading are not the same, the return to be monitored in the random access memory in the processor to the write and read data, when the number of returns is larger than a preset number, it is determined that the verification fails;

[0115] 第二判定子单元,用于当写入的数据与读出的数据相同时,判定为校验通过。 [0115] The second determining sub-unit, configured to, when data writing and data reading are the same, it is determined that the verification passes.

[0116] 优选地,所述监控单元22可以包括: [0116] Preferably, the monitoring unit 22 may include:

[0117] 校验码计算子单元,用于对所述被监控处理器中的只读存储器中存储指定函数的区域进行冗余校验得到校验码; [0117] checksum calculation sub-unit, configured to monitor the area of ​​the processor is stored in the memory in the read-only specified function to obtain redundancy check code check;

[0118] 比对子单元,用于将所述校验码与预设校验码进行比对; [0118] than the subunit, for the check code with a predetermined check code for comparison;

[0119] 判定子单元,用于当所述校验码与预设校验码不相同时,将所述随机存储器判定为异常。 [0119] determining subunit, configured to, when said check code with a predetermined check code is not the same, the random access memory is determined to be abnormal.

[0120] 优选地,所述监控单元22可以包括: [0120] Preferably, the monitoring unit 22 may include:

[0121] 第一补码计算子单元,用于当所述被监控处理器运行所述指定函数的过程中发生中断时,对寄存器中的数据求补得到第一补码; [0121] Complement first calculating subunit, when said monitored for interrupting operation of the processor during in the specified function, the data register to obtain a first complementing complement;

[0122] 补码存储子单元,用于将所述第一补码存入所述随机存储器中; [0122] Complement storage sub-unit, configured to complement the first code stored in the random access memory;

[0123] 第二补码计算子单元,用于在中断结束后,对所述第一补码求补得到第二补码; [0123] Complement second calculating subunit, configured After the interrupt, the first to obtain a second complement complement complement;

[0124] 判断子单元,用于判断所述第二补码与寄存器中的数据是否相等; [0124] determination sub-unit, determines a second data register and complement for equality;

[0125] 判定子单元,用于当所述第二补码与寄存器中的数据不相等时,将所述随机存储器判定为异常。 When the [0125] determination sub-unit, when data for the second complement register are not equal, the random access memory is determined to be abnormal.

[0126] 优选地,所述监控单元22可以包括: [0126] Preferably, the monitoring unit 22 may include:

[0127] 发送子单元,用于将预设参数发送至所述被监控处理器; [0127] sending subunit, configured to send the parameters to the default processor to be monitored;

[0128] 接收子单元,用于接收所述被监控处理器反馈的根据所述预设参数运行所述程序流的结果值; [0128] receiving subunit, configured to receive the feedback processor is monitored according to the preset operation of the program stream parameter result value;

[0129] 比对子单元,用于将所述结果值与预设结果值进行比对; [0129] than the subunit, the result for a result value with a preset value for comparison;

[0130] 判定子单元,用于当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指定函数的程序流判定为异常。 [0130] determining subunit, configured to, when the result value and the preset value is not equal to the result, the specified function is monitoring the program stream processor judged to be abnormal.

[0131] 优选地,所述监控单元22可以包括: [0131] Preferably, the monitoring unit 22 may include:

[0132] 发送子单元,用于将预设参数和测试函数索引发送至所述被监控处理器; [0132] sending subunit, configured to preset parameters and test functions to be monitored is transmitted to the index processor;

[0133] 接收子单元,用于接收所述被监控处理器反馈的根据所述预设参数和所述测试函数索引执行测试函数的结果值,其中所述测试函数由所述被监控处理器的指令集组成; [0133] The receiving subunit, configured to receive the feedback processor is monitored according to the preset parameter values ​​and the results of the test function execution index test function, wherein the function test is monitored by the processor composition instruction set;

[0134] 比对子单元,用于将所述结果值与预设结果值进行比对; [0134] than the subunit, the result for a result value with a preset value for comparison;

[0135] 判定子单元,用于当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指令集判定为异常。 [0135] determining subunit, configured to, when the result value and the preset value is not equal to the result, the monitor processor is the instruction set is determined to be abnormal.

[0136] 优选地,所述监控单元22可以包括: [0136] Preferably, the monitoring unit 22 may include:

[0137] 发送子单元,用于向所述被监控处理器发送问题; [0137] sending subunit, is for the processor to monitor the transmission problem;

[0138] 接收子单元,用于接收所述被监控处理器反馈的答案以及对所述答案进行计数得到的第一答案数量; [0138] receiving subunit, configured to receive the processor to be monitored and fed back to the answers of the first answer answers counted number;

[0139] 计数子单元,用于对所述被监控处理器反馈的答案进行计数得到第二答案数量; [0139] sub-unit count for the feedback to be monitored by counting the number of processor answers the second answer;

[0140] 判断子单元,用于判断所述第一答案数量与所述第二答案数量是否相等; [0140] determining subunit, for determining whether the number of the first answer and the second answer number are equal;

[0141] 判定子单元,用于当所述第一答案数量与所述第二答案数量不相等时,将所述问答通信机制判定为异常。 [0141] determining sub-unit, when the first answer for the number of the second number does not equal the answer, the communication mechanism Q is determined to be abnormal.

[0142] 上述处理器监控装置可以应用于电池管理系统中,即所述被监控处理器是电池管理系统中的主处理器或从处理器,其中所述从处理器是对电池包内电池单体参数进行采集的处理器,所述主处理器是对所述从处理器进行管理的处理器,所述指定函数是所述电池管理系统的安全诊断函数。 [0142] The processor may be applied to the monitoring device in a battery management system, i.e. the monitored processor is a master battery management system from the processor or the processor, wherein said single cell within the battery pack to the processor body parameter acquisition processor, the master processor is a processor from the managing processor, the designated function is a diagnostic function of the safety management system of the battery.

[0143] 优选地,当所述验失败时,可以使所述被监控处理器断电。 [0143] Preferably, when the test fails, the processor can be monitored so that the de-energized.

[0144] 优选地,所述处理器监控装置还包括: [0144] Preferably, said apparatus further comprising monitoring the processor:

[0145] 应急处理单元,用于在将所述被监控处理器判定为异常后,断开预充继电器、主正极继电器、主负极继电器,并使所述电池管理系统复位。 [0145] Emergency treatment unit for monitoring by the processor is determined to be abnormal, the precharge relay OFF, the main relay positive electrode, a negative electrode of the main relay, and the battery management system reset.

[0146] 本发明第四实施例提供一种处理器监控系统,如图3所示该系统包括第一处理器31和第二处理器32 ; [0146] The fourth embodiment of the present invention provides a monitoring system processor, the system shown in FIG. 3 includes a first processor 31 and second processor 32;

[0147] 所述第一处理器31作为上述第三实施例中的处理器监控装置监控所述第二处理器32 ; [0147] The first processor 31 as a processor monitors embodiment of means for monitoring the second processor 32 of the third embodiment;

[0148] 所述第二处理器32作为上述第三实施例中的处理器监控装置监控所述第一处理器31。 Examples of the processor monitors the first apparatus monitoring processor 31 [0148] The second processor 32 as the third embodiment.

[0149] 对于处理器多于两个的系统,系统中的多个处理器中的一个可以作为上述第三实施例提供的处理器监控装置监控所述多个处理器中的其他处理器。 [0149] For more than two processor system, a monitoring device may monitor the processor as the third embodiment of the system provides a plurality of other processors in the processor of the plurality of processors.

[0150] 优选地,所述第一处理器是电池管理系统中的主处理器,所述第二处理器是电池管理系统中的从处理器。 [0150] Preferably, the first processor is a battery management system in the master processor, the second processor is a battery management system from the processor.

[0151] 本系统可以基于电池管理系统已有的硬件架构进行监控,只需要对电池管理系统进行软件上的改进,不需要增加监控芯片,由此可以降低成本。 [0151] The present system can be based on a battery management system to monitor the existing hardware architecture, the software only need to improve the battery management system, without increasing the monitoring chip, whereby cost can be reduced. 利用其中一个从板内的处理器作为监控处理器与主板内的处理器实现相互监控,由于主板与从板之间使用CAN总线通信,所以可以保证监控过程中数据的传输效率与可靠性。 Wherein each implemented using a processor to monitor a monitor processor on the motherboard and from the processor in the plate, and due to the motherboard using the CAN bus communication from between the plates, it is possible to ensure the transmission efficiency and reliability of the monitoring process the data.

[0152] 显然,上述实施例仅仅是为清楚地说明所作的举例,而并非对实施方式的限定。 [0152] Clearly, the above-described embodiments are merely made to clearly illustrate example, and not limited to the embodiment. 对于所属领域的普通技术人员来说,在上述说明的基础上还可以做出其它不同形式的变化或变动。 Those of ordinary skill in the art, on the basis of the above described variations or changes may be made in various other forms. 这里无需也无法对所有的实施方式予以穷举。 It is unnecessary and can not be exhaustive of all embodiments. 而由此所引伸出的显而易见的变化或变动仍处于本发明创造的保护范围之中。 The obvious changes or variations therefrom corollary is still in the scope of the inventions.

Claims (10)

  1. 1.一种处理器监控方法,其特征在于,包括: 对被监控处理器中的只读存储器和/或随机存储器进行校验; 当所述校验通过时,对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域、所述指定函数的程序流、被监控处理器的指令集和问答通信机制中的至少一个进行监控; 当所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,将所述被监控处理器判定为异常。 CLAIMS 1. A method for monitoring a processor, wherein, comprising: a processor for monitoring the read-only memory and / or random access memory for verification; when the check by the processor to be monitored and / or the random access memory area for storing the specified function of the read-only memory, the program flow function specified, a set of instructions to monitor at least one of Q and communication mechanisms in the processor to be monitored; when the storage region designation function, program flow, an exception instruction set and any one of Q of communication mechanisms, the monitoring processor are determined to be abnormal.
  2. 2.根据权利要求1所述的处理器监控方法,其特征在于,所述对被监控处理器中的所述只读存储器中存储指定函数的区域进行监控包括: 对所述被监控处理器中的只读存储器中存储指定函数的区域进行冗余校验得到校验码; 将所述校验码与预设校验码进行比对; 当所述校验码与预设校验码不相同时,将所述随机存储器判定为异常。 The processor of the monitoring method as claimed in claim 1, wherein said monitoring comprises monitoring region of the processor stored in a read only memory specified function: the processor is monitored read-only memory area for storing the specified function to obtain redundancy check code check; check code with the check code preset for comparison; check code with the check code is not a predetermined phase when Meanwhile, the random access memory is determined to be abnormal.
  3. 3.根据权利要求1所述的处理器监控方法,其特征在于,所述对被监控处理器中的所述随机存储器中存储指定函数的区域进行监控包括: 当所述被监控处理器运行所述指定函数的过程中发生中断时,对寄存器中的数据求补得到第一补码; 将所述第一补码存入所述随机存储器中; 在中断结束后,对所述第一补码求补得到第二补码; 判断所述第二补码与寄存器中的数据是否相等; 如果所述第二补码与寄存器中的数据不相等,则将所述随机存储器判定为异常。 3. The processor of the monitoring method as claimed in claim 1, wherein said monitoring comprises monitoring region of the random access memory is stored in the processor designated function: when the monitored processor run when an interrupt occurs during said specified function, the data register to obtain a first complementing complement; complement of said first into said random access memory; after interruption of the first complement complement obtain a second complement; determining whether the second data complement register are equal; if the data of the second register and the complement of the unequal, a random access memory will be determined that the abnormality.
  4. 4.根据权利要求1所述的处理器监控方法,其特征在于,对所述被监控处理器中的指定函数的程序流进行监控包括: 将预设参数发送至所述被监控处理器; 接收所述被监控处理器反馈的根据所述预设参数运行所述程序流的结果值; 将所述结果值与预设结果值进行比对; 当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指定函数的程序流判定为异常。 4. The processor of the monitoring method as claimed in claim 1, wherein the specified function of the monitored processor to monitor program flow comprises: transmitting the preset parameter to the processor to be monitored; receiving the processor of said monitored result of the preset value of the feedback operation of the program stream parameter; the result value with a preset value for comparison result; when the result value and the predetermined value does not result equal, the designated function is to monitor the processor program flow is determined to be abnormal.
  5. 5.根据权利要求1所述的处理器监控方法,其特征在于,对所述被监控处理器中的指令集进行监控包括: 将预设参数和测试函数索引发送至所述被监控处理器; 接收所述被监控处理器反馈的根据所述预设参数和所述测试函数索引执行测试函数的结果值,其中所述测试函数由所述被监控处理器的指令集组成; 将所述结果值与预设结果值进行比对; 当所述结果值与所述预设结果值不相等时,将所述被监控处理器中的指令集判定为异常。 5. The processor of the monitoring method as claimed in claim 1, wherein the processor is monitoring instruction set to monitor comprising: a test function and the preset parameter index is transmitted to the processor to be monitored; the processor receiving said feedback monitoring the preset value performs the test result of the function parameter and the index function test, wherein the test function is monitored by the processor's instruction set composition; the result value with a preset value for comparison result; the result when the result value and the preset value is not equal, the monitored processor instruction set judged to be abnormal.
  6. 6.根据权利要求1所述的处理器监控方法,其特征在于,对所述问答通信机制进行监控包括: 向所述被监控处理器发送问题; 接收所述被监控处理器反馈的答案以及对所述答案进行计数得到的第一答案数量; 对所述被监控处理器反馈的答案进行计数得到第二答案数量; 判断所述第一答案数量与所述第二答案数量是否相等; 当所述第一答案数量与所述第二答案数量不相等时,将所述问答通信机制判定为异常。 6. The processor of the monitoring method as claimed in claim 1, wherein the communication mechanism Q monitor comprising: a processor to monitor the transmission problem; processor receiving said monitored for feedback and answers the answers of the first answer number counted; a feedback monitor processor by counting the number of answers to answer the second; determining a first number of said second number answers the answers are equal; if the when the number of the first answer is not equal to the second number answers, the questions and answers communication mechanism determined to be abnormal.
  7. 7.一种处理器监控方法,其应用于第一处理器和第二处理器,其特征在于,包括: 所述第一处理器利用权利要求1-6任一项所述的处理器监控方法监控所述第二处理器; 所述第二处理器利用权利要求1-6任一项所述的处理器监控方法监控所述第一处理器。 A method for monitoring a processor, which is applied to the first and second processors, characterized by comprising: a first processor using the processor monitoring method as claimed in any one of claims 1-6 monitoring the second processor; processor using said second processor monitoring method as claimed in claim any one of claims 1 to 6 to monitor the first processor.
  8. 8.根据权利要求7所述的处理器监控方法,其特征在于,所述第一处理器是电池管理系统中的主处理器,所述第二处理器是电池管理系统中的从处理器。 8. The processor of the monitoring method according to claim 7, wherein said first processor is a battery management system in the master processor, the second processor is a battery management system from the processor.
  9. 9.一种处理器监控装置,其特征在于,包括: 校验单元,用于对被监控处理器中的只读存储器和/或随机存储器进行校验; 监控单元,用于在所述校验通过时对所述被监控处理器中的所述只读存储器和/或所述随机存储器中存储指定函数的区域、所述指定函数的程序流、被监控处理器的指令集和问答通信机制中的至少一个进行监控; 判定单元,用于在所述存储指定函数的区域、程序流、指令集和问答通信机制中的任一个异常时,将所述被监控处理器判定为异常。 A monitoring device processor, wherein, comprising: a checking unit, a read only memory for the processor to be monitored and / or random access memory for verification; monitoring unit for checking the through the monitored and / or the random access memory area of ​​the read only memory of the processor or stored in the specified function, the program flow function specified, a set of instructions to be monitored and Q communication mechanism processor at least one monitor; determining means, for storing in said region designated function, program flow, any instruction set and Q communication mechanisms when an exception, the monitor processor is determined to be abnormal.
  10. 10.一种处理器监控系统,其特征在于,包括第一处理器和第二处理器; 所述第一处理器作为权利要求9所述的处理器监控装置监控所述第二处理器; 所述第二处理器作为权利要求9所述的处理器监控装置监控所述第一处理器。 10. A processor monitors system comprising a first processor and a second processor; the first processor as claimed in claim 9, the processor monitors the second monitoring device processor; the said second processor as the monitoring device for monitoring processor as claimed in claim in claim 9 said first processor.
CN 201510178984 2015-04-15 2015-04-15 Processor monitoring method, device and system CN104914815A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 201510178984 CN104914815A (en) 2015-04-15 2015-04-15 Processor monitoring method, device and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 201510178984 CN104914815A (en) 2015-04-15 2015-04-15 Processor monitoring method, device and system

Publications (1)

Publication Number Publication Date
CN104914815A true true CN104914815A (en) 2015-09-16

Family

ID=54083974

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 201510178984 CN104914815A (en) 2015-04-15 2015-04-15 Processor monitoring method, device and system

Country Status (1)

Country Link
CN (1) CN104914815A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105487973A (en) * 2015-11-24 2016-04-13 无锡江南计算技术研究所 Processor exception test method capable of continuously capturing program exceptions
CN105955115A (en) * 2016-05-10 2016-09-21 重庆长安汽车股份有限公司 Method and device for monitoring program flow of whole automobile controller
CN106406283A (en) * 2016-10-25 2017-02-15 威胜集团有限公司 Data management method of double controllers of intelligent electric energy meter

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1926518A (en) * 2004-03-01 2007-03-07 飞思卡尔半导体公司 Autonomous memory checker for runtime security assurance and method therefore
US20090182453A1 (en) * 2004-04-28 2009-07-16 Shinichi Oonaka Robot for participating in a joint performance with a human partner
CN101533438A (en) * 2008-05-24 2009-09-16 威盛电子股份有限公司 Microprocessor device for providing secure execution environment and method for executing secure code thereof
CN102902906A (en) * 2012-09-26 2013-01-30 中国航天科技集团公司第九研究院第七七一研究所 Microprocessor instruction set validation method
CN102929275A (en) * 2012-11-09 2013-02-13 重庆长安汽车股份有限公司 Security monitoring and control method and system of automobile controller

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1926518A (en) * 2004-03-01 2007-03-07 飞思卡尔半导体公司 Autonomous memory checker for runtime security assurance and method therefore
US20090182453A1 (en) * 2004-04-28 2009-07-16 Shinichi Oonaka Robot for participating in a joint performance with a human partner
CN101533438A (en) * 2008-05-24 2009-09-16 威盛电子股份有限公司 Microprocessor device for providing secure execution environment and method for executing secure code thereof
CN102902906A (en) * 2012-09-26 2013-01-30 中国航天科技集团公司第九研究院第七七一研究所 Microprocessor instruction set validation method
CN102929275A (en) * 2012-11-09 2013-02-13 重庆长安汽车股份有限公司 Security monitoring and control method and system of automobile controller

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105487973A (en) * 2015-11-24 2016-04-13 无锡江南计算技术研究所 Processor exception test method capable of continuously capturing program exceptions
CN105487973B (en) * 2015-11-24 2018-01-19 无锡江南计算技术研究所 Continuous capture program exception processor exception Test Method
CN105955115A (en) * 2016-05-10 2016-09-21 重庆长安汽车股份有限公司 Method and device for monitoring program flow of whole automobile controller
CN106406283A (en) * 2016-10-25 2017-02-15 威胜集团有限公司 Data management method of double controllers of intelligent electric energy meter
CN106406283B (en) * 2016-10-25 2018-10-09 威胜集团有限公司 The data management method of a dual-controller smart meter

Similar Documents

Publication Publication Date Title
US6374364B1 (en) Fault tolerant computing system using instruction counting
US20050102578A1 (en) System and method for capturing kernel-resident information
US20150074463A1 (en) SAN Performance Analysis Tool
CN1553328A (en) Fault tree analysis based system fault positioning method and device
US20080046802A1 (en) Memory controller and method of controlling memory
US4797885A (en) Distributed processing system and method
Lomuscio et al. A formalisation of violation, error recovery, and enforcement in the bit transmission problem
CN101833497A (en) Computer fault management system based on expert system method
US20080046603A1 (en) Line Diagnostic Device, Bus System, Line Diagnostic Method, Bus System Control Method, and Line Diagnostic Program
US20120210172A1 (en) Multiprocessor switch with selective pairing
JPH08297588A (en) Double collation device
Curzon et al. Detecting multiple classes of user errors
US8099636B2 (en) System and method for protecting memory stacks using a debug unit
CN101799776A (en) Fault processing method of multi-core processor, multi-core processor and communication device
CN102141940A (en) Device, method and system for recovering firmware update
JP2010218492A (en) Fault diagnosis system, fault diagnosis device and fault diagnosis method
US20130246866A1 (en) System and method for verifying the integrity of a safety-critical vehicle control system
US20060150033A1 (en) Method for monitoring the execution of a program in a micro-computer
US7437218B2 (en) Method and device for controlling the functional unit of a motor vehicle
US20120124410A1 (en) System and method for self-healing
US20150212952A1 (en) Method for the coexistence of software having different safety levels in a multicore processor system
JP2001175494A (en) System and method for doubly diagnosing normality of arithmetic processing of microprocessor
US8286043B2 (en) System, computer program product and method for testing a logic circuit
Oliveira et al. Modern GPUs radiation sensitivity evaluation and mitigation through duplication with comparison
WO1997006487A1 (en) Microprocessor system for safety-critical regulating systems

Legal Events

Date Code Title Description
C06 Publication
C10 Entry into substantive examination
RJ01